passwords show up in log files with Winbindd

[Andrew Bartlett]

Hans Rasmussen wrote:
> 
> Hi All
> 
> I'm thinking that this isn't good.  This is from the CVS Head from Dec 31,
> so is this debug code??.  Even the root password can show up as Winbind
> tries to authenticate a console session.  This is from my mail log, but is
> also shows in the auth.log.
> 
> Jan  5 07:50:59 sbs pam_winbind[22489]: Verify user `domain+user' with
> password `passwd'
> 
> Any ideas.  Thanks, great work so far.

It should only show up if 'debug' is set as a command line option, but I
will look into #ifdef DEBUG_PASSWORDing it.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net